$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3ac84911-08f7-315c-bca4-a72a1c477873.roa File: 3ac84911-08f7-315c-bca4-a72a1c477873.roa (raw, json) Hash identifier: ntXLrPqunh0KgYORFN/bQcd8dKGnMigHol81JVt6RVA= Subject key identifier: 9D:87:09:92:1B:8A:36:2B:43:54:A6:B5:15:C1:0A:54:D0:14:57:A5 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584A3A1596EE280B9C91146DF800 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3ac84911-08f7-315c-bca4-a72a1c477873.roa Signing time: Wed 18 Jun 2025 01:00:50 +0000 ROA not before: Wed 18 Jun 2025 01:00:50 +0000 ROA not after: Tue 16 Sep 2025 01:00:50 +0000 asID: 16625 IP address blocks: 23.39.0.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:3a:15:96:ee:28:0b:9c:91:14:6d:f8:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jun 18 01:00:50 2025 GMT Not After : Sep 16 01:00:50 2025 GMT Subject: CN=fc2b869c-ab0d-4a97-bc7b-bcad991f1aee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:33:03:71:78:92:f1:c5:ae:d4:0c:22:cb:fc: 98:9f:c2:13:a1:93:4d:6c:d4:a4:b8:ef:b7:0b:59: 84:37:73:6a:bc:ab:52:30:21:a8:8b:77:9a:a7:41: 2b:31:9d:75:16:53:77:38:18:b5:8c:6a:06:4f:28: f7:6f:dc:5f:8a:09:fe:ad:d6:17:61:90:6e:a3:8a: 33:44:78:36:e7:2f:3b:ca:18:87:2f:f6:9e:81:a0: 18:9a:7b:88:ce:10:03:65:bc:8f:9a:b3:26:59:dd: fb:48:db:aa:af:35:36:e9:81:ed:01:4d:58:fb:79: e5:96:7e:1a:7f:3a:38:98:b5:9d:27:e1:df:08:38: dc:20:7e:c9:db:f2:80:6e:99:c0:82:d4:94:ee:ef: bf:17:3b:37:e1:cb:48:ad:0d:d8:4a:ed:ba:7d:8e: a9:6b:69:81:fd:b9:35:1e:04:bc:dd:96:c4:fe:d6: 2c:2d:9b:c5:e1:cd:76:a0:da:e3:5e:d1:46:1e:a3: 64:c2:05:f2:20:6a:3b:40:a9:21:8d:a5:5d:c8:76: f0:8c:6a:b1:35:1e:91:89:79:f7:78:49:ef:e1:9d: 5c:b1:12:0a:31:a2:f8:aa:63:57:92:e9:e0:8d:e0: 65:17:98:ba:ca:30:0d:e7:37:be:91:ee:b7:a2:2b: a6:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:87:09:92:1B:8A:36:2B:43:54:A6:B5:15:C1:0A:54:D0:14:57:A5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3ac84911-08f7-315c-bca4-a72a1c477873.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.39.0.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 14:9d:2f:7e:fd:4b:ab:1a:33:cf:44:a9:41:7e:eb:ee:a7:be: 1d:8f:e8:c9:f6:d9:14:ce:c3:39:3a:c7:fa:49:2a:bc:ba:82: ee:5e:36:91:80:83:f4:b6:ec:3a:8f:43:df:7e:36:2b:dd:f5: ef:46:64:72:0f:26:24:4e:41:47:6f:af:af:28:3a:24:74:f4: 56:89:9f:39:07:e4:3c:d4:6f:97:4a:1d:72:4a:5b:3f:2c:3d: d7:51:14:b8:f3:19:4c:84:f7:2e:b2:aa:62:d7:91:f6:bc:ab: ba:f0:22:b2:6e:45:a6:27:02:7f:59:61:65:b8:e4:b1:9b:ad: f0:30:49:c0:35:ea:c4:51:72:e5:dd:c3:df:61:56:b6:2c:28: 87:cc:77:6c:93:f8:70:2c:9e:a0:af:04:a2:25:ce:65:a9:2d: 0a:f8:25:2b:4e:f1:d7:65:28:aa:51:d0:5b:2b:d3:86:4c:26: b5:2f:36:99:b7:98:6f:af:e5:50:95:3f:23:ee:97:8a:7c:cf: 19:90:cd:41:81:ee:55:73:a1:3c:90:db:5a:88:d7:ed:e3:2b: c3:b8:25:c8:05:e2:62:cc:ff:30:90:b4:94:05:ce:7a:6c:f6: 4b:23:f2:f6:61:a7:19:57:1b:98:7e:91:ec:78:ac:af:07:64: eb:ee:b3:88 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo6FZbuKAuckRRt+AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDYxODAxMDA1MFoXDTI1MDkxNjAxMDA1MFowLzEtMCsGA1UEAxMk ZmMyYjg2OWMtYWIwZC00YTk3LWJjN2ItYmNhZDk5MWYxYWVlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjzMDcXiS8cWu1Awiy/yYn8IToZNNbNSkuO+3 C1mEN3NqvKtSMCGoi3eap0ErMZ11FlN3OBi1jGoGTyj3b9xfign+rdYXYZBuo4oz RHg25y87yhiHL/aegaAYmnuIzhADZbyPmrMmWd37SNuqrzU26YHtAU1Y+3nlln4a fzo4mLWdJ+HfCDjcIH7J2/KAbpnAgtSU7u+/Fzs34ctIrQ3YSu26fY6pa2mB/bk1 HgS83ZbE/tYsLZvF4c12oNrjXtFGHqNkwgXyIGo7QKkhjaVdyHbwjGqxNR6RiXn3 eEnv4Z1csRIKMaL4qmNXkungjeBlF5i6yjAN5ze+ke63oiumEQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ2HCZIbijYrQ1SmtRXBClTQFFelMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvM2FjODQ5MTEtMDhmNy0z MTVjLWJjYTQtYTcyYTFjNDc3ODczLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCFycAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABSdL379S6saM89EqUF+6+6nvh2P6Mn22RTOwzk6x/pJKry6gu5eNpGA g/S27DqPQ99+Nivd9e9GZHIPJiROQUdvr68oOiR09FaJnzkH5DzUb5dKHXJKWz8s PddRFLjzGUyE9y6yqmLXkfa8q7rwIrJuRaYnAn9ZYWW45LGbrfAwScA16sRRcuXd w99hVrYsKIfMd2yT+HAsnqCvBKIlzmWpLQr4JStO8ddlKKpR0Fsr04ZMJrUvNpm3 mG+v5VCVPyPul4p8zxmQzUGB7lVzoTyQ21qI1+3jK8O4JcgF4mLM/zCQtJQFznps 9ksj8vZhpxlXG5h+kex4rK8HZOvus4g= -----END CERTIFICATE-----Generated at Sun Jun 29 13:25:15 2025 by rpki-client